HCA Data Usage. During the course of any implementation and subsequent support and life cycle management, any OCHCA data that the vendors have access to in any manner shall be considered confidential unless otherwise designated in writing. • Vendors must not use or disclose OCHCA’s data other than as permitted or as required by contract or law. • The vendors must agree to use appropriate safeguards to prevent the unauthorized use or disclosure of OCHCA’s data during any time that the data is stored or transported in any manner by vendors. • After the end of any appropriate use of OCHCA’s data within the vendors’ possession, such data must be returned to OCHCA or securely destroyed unless otherwise permitted by contract or law.
HCA Data Usage. • During the course of any implementation and subsequent support and life cycle management, any OCHCA data that the vendors have access to in any manner shall be considered confidential unless otherwise designated in writing. • Vendors must not use or disclose OCHCA’s data other than as permitted or as required by contract or law. County of Orange Health Care Agency Page 42 MA-042-17011367 • The vendors must agree to use appropriate safeguards to prevent the unauthorized use or disclosure of OCHCA’s data during any time that the data is stored or transported in any manner by vendors. • After the end of any appropriate use of OCHCA’s data within the vendors’ possession, such data must be returned to OCHCA or securely destroyed unless otherwise permitted by contract or law.
HCA Data Usage. 11 1. During the course of any implementation and subsequent support and life cycle 12 management, any OCHCA data that the vendors have access to in any manner shall be considered 13 confidential unless otherwise designated in writing.
HCA Data Usage. 11 Cloud Solutions ............................................................................................................................................ 12 Policies......................................................................................................................................................... 13 Business Continuity / Disaster Recovery Plans ...........................................................................................
HCA Data Usage. During the course of any implementation and subsequent support and life cycle management, any OCHCA data that the vendors have access to in any manner shall be considered confidential unless otherwise designated in writing. • Vendors must not use or disclose OCHCA’s data other than as permitted or as required by contract or law. • The vendors must agree to use appropriate safeguards to prevent the unauthorized use or disclosure of OCHCA’s data during any time that the data is stored or transported in any manner by vendors. County of Orange MA-042-20012181 Health Care Agency Page 50 of 65 Folder No. C025988 • After the end of any appropriate use of OCHCA’s data within the vendors’ possession, such data must be returned to OCHCA or securely destroyed unless otherwise permitted by contract or law.
HCA Data Usage. During the course of any implementation and subsequent support and life cycle management, any OCHCA data that the vendors have access to in any manner shall be considered confidential unless otherwise designated in writing. • Vendors must not use or disclose OCHCA’s data other than as permitted or as required by contract or law. • The vendors must agree to use appropriate safeguards to prevent the unauthorized use or disclosure of OCHCA’s data during any time that the data is stored or transported in any manner by vendors. • After the end of any appropriate use of OCHCA’s data within the vendors’ possession, such data must be returned to OCHCA or securely destroyed unless otherwise permitted by contract or law. Cloud Solutions Application Service Providers hosting OCHCA data must meet the following additional requirements and are required to comply with and provide deliverables noted below: • SSAE 18. SSAE 18 SOC 2 Type 2 or SOC 3 compliance certificate • Network Intrusion Detection and Prevention. All systems that are accessible via the internet must actively use a network based intrusion detection and prevention solution.
